Master Cybersecurity Architect & Operations Specialist

Location: 100% remote; candidates must be based in Brazil or Colombia. Working hours must align with US-based stakeholders during US business hours.

Company

CI&T is a technology transformation company helping large enterprises apply AI, application modernization, Data & AI, Martech, and business strategy solutions.

What you will do

• Lead the continuous improvement of cybersecurity operations, including monitoring, detection, investigation, escalation, and response.
• Evaluate, optimize, integrate, and manage security architecture, technologies, and services across SIEM, endpoint, network, identity, and cloud security.
• Coordinate third-party cybersecurity providers, consolidate service activities, manage dependencies, monitor performance, and drive accountability.
• Act as the senior escalation point for significant alerts and complex incidents; coordinate investigations, containment, remediation, communication, and follow-up.
• Lead threat intelligence, detection engineering, security projects, implementations, integrations, upgrades, and continuous improvement initiatives.
• Present security posture, incidents, threats, risks, and improvement initiatives to executive stakeholders, including opportunities to use AI and automation.

Requirements

• Significant cybersecurity experience with a strong background in security architecture, security operations, or both.
• Experience leading cybersecurity initiatives, coordinating technical teams, and managing third-party security service providers.
• Strong understanding of SOC operating models, including monitoring, alert triage, investigation, escalation, and incident response.
• Hands-on experience integrating, configuring, monitoring, and optimizing SIEM, EDR, endpoint protection, identity security, network security, VPN, DNS security, and cloud security technologies, including Microsoft Sentinel or other SIEM platforms.
• Experience managing complex incidents, coordinating investigations, supporting containment and remediation, and communicating findings and recommendations.
• Experience with threat intelligence, threat detection, security monitoring improvements, proactive defense, security projects, implementations, integrations, upgrades, and continuous improvement.
• Ability to assess architecture and operational processes, identify gaps, and translate findings into practical technical and organizational improvements.
• Excellent communication, leadership, analytical, and problem-solving skills, including decision-making under pressure and communication with technical and executive stakeholders.
• Fluent English is required for daily interaction with US-based stakeholders, technical discussions, meetings, and executive-level presentations. Must work independently, prioritize competing demands, and collaborate across geographically distributed teams.

Nice to have

• Experience in healthcare, medical device, or other regulated industries, including HIPAA, HITRUST, NIST Cybersecurity Framework, or ISO 27001.
• Experience supporting US-based organizations and working directly with executive stakeholders.
• Experience with AWS security services, cloud security architecture, cybersecurity risk management, operational controls, and regulatory requirements.
• Experience improving SOC efficiency through automation, orchestration, and security operations use cases.
• Practical experience with AI tools or AI-enabled solutions for cybersecurity operations, threat analysis, incident investigation, or reporting.
• CISSP, CISM, CCSP, GIAC, or equivalent certifications.
• Bachelor’s degree in Computer Science, Information Security, or a related field.

Culture & Benefits

• Remote work model with working hours aligned to US-based stakeholders.
• Opportunity to work with a global organization of 8,000 employees across more than 25 countries.
• Benefits are provided through CI&T’s Brazil careers program.

Hiring process

• Present an assessment during the selection process using the specified report requirements.
• If the assessment is not yet available, support is provided to obtain it.